Abstract: Existing anomaly intrusion detection algorithms based on machine learning are usually founded on the equivalent learning of all historical dataset. Therefore, the learned network behavior profiles depend on the historical data heavily, thus behavior chara

Key words: Intrusion detection,Data stream process,Clustering analysis